Vulnerability Database

323,358

Total vulnerabilities in the database

CVE-2025-14573

Mattermost versions 10.11.x <= 10.11.9 fail to enforce invite permissions when updating team settings, which allows team administrators without proper permissions to bypass restrictions and add users to their team via API requests. Mattermost Advisory ID: MMSA-2025-00561

  • Published: Feb 16, 2026
  • Updated: Feb 17, 2026
  • CVE: CVE-2025-14573
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 3.8
  • AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

CWEs:

Software From Fixed in
mattermost / mattermost_server 10.11.0 10.11.10